$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft File: BA2WgwOzZPdyp1NXgiDTU34WFm4.mft (raw, json) Hash identifier: FVYNJfVDYRZ00HpbzYfSYLUcKsIMeEN8IrVeqqacnow= Subject key identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E Certificate serial: 040A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft Manifest number: 0405 Signing time: Sat 23 Aug 2025 21:13:16 +0000 Manifest this update: Sat 23 Aug 2025 21:13:16 +0000 Manifest next update: Mon 25 Aug 2025 21:13:16 +0000 Files and hashes: 1: BA2WgwOzZPdyp1NXgiDTU34WFm4.crl (hash: 02CxTc5P6R9rizWwXDLGocX0CrMsV7fYPFQyBfkKpVw=) 2: QnYeiP_6Ur5ogI3r_rzBxb28UDk.roa (hash: 7BrFWHe6Carm6PT3HzcyCBEifHA+N+dP+9moo3lr3m4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040D968303B364F772A753578220D3537E16166E Validity Not Before: Aug 23 21:13:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F1D5BB810C5131FFBE9D13696A504880E5C0D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:bf:0e:2f:37:e4:94:08:df:59:ec:1a:78: 26:eb:b8:cd:99:22:f3:b4:66:9d:37:ad:0d:48:08: a3:9d:09:5e:a5:13:ea:85:78:a5:d7:30:75:8d:0a: 99:ef:fb:8a:54:8b:0f:fc:0e:e7:ed:cc:05:5f:2a: c3:76:4f:9e:33:53:57:62:41:eb:1e:05:0e:c9:28: 04:e6:3a:37:8d:51:26:88:b9:81:07:8e:b7:04:39: 6b:08:26:25:6f:e8:76:cd:f9:2b:44:24:9b:35:16: 0c:ae:fe:57:89:24:ab:2d:5c:eb:27:18:db:b9:ad: 2a:0f:70:c0:ce:f9:b3:49:1f:d0:72:28:55:ea:58: 93:95:ba:6b:7e:ad:39:67:7a:0c:20:f1:46:89:83: 5a:22:a8:37:db:45:26:9a:d7:95:a0:6f:2c:95:a6: 76:58:54:4a:e1:51:02:e4:f8:ba:d8:1f:fb:10:c7: f1:8f:8b:fe:10:b7:6c:8e:c4:b0:f4:d0:f2:c5:91: 74:1d:65:c2:f8:59:08:0a:bc:bf:95:80:e9:84:82: 04:36:a9:c6:cc:aa:03:0f:ac:76:6a:bf:a0:28:35: 95:b9:5f:43:91:88:f1:28:a2:2e:a8:f8:cb:ce:d8: 14:21:98:d0:5d:49:60:e0:ff:5d:ea:b1:cb:bc:96: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 X509v3 Authority Key Identifier: keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:cf:d3:79:c9:3c:68:67:f3:5e:3b:a7:08:41:66:0e:b0: 82:8d:dc:d2:a5:79:13:08:02:99:b0:2c:e4:49:2c:ac:a1:62: 94:ae:79:45:97:4c:e8:4c:21:7f:6f:cf:e8:5c:fe:4c:95:c0: dd:5f:ce:1e:41:86:21:d2:ec:78:1e:70:a0:86:d5:da:2b:bd: 48:ab:6b:b3:ac:e2:b2:4f:56:11:b6:bb:c4:67:3a:77:3c:da: 4d:33:b3:9a:79:5e:31:5e:d3:fc:4b:18:cb:02:99:8a:c6:e4: 4b:2e:35:41:aa:7c:f1:89:eb:72:39:93:fe:69:df:79:36:71: 10:c2:4b:76:61:aa:2b:64:70:23:6e:15:da:27:93:c4:95:d9: 7d:1e:29:02:50:d8:b4:d8:d6:9d:79:f7:4b:a1:33:35:e6:f4: 82:be:4c:b5:63:8a:ce:fc:40:a3:41:f0:4c:11:27:3e:6e:6e: 57:a6:b2:7e:6b:6b:f6:cd:e5:76:3b:f7:5f:ad:ca:08:1d:7c: 61:9d:71:cf:52:a6:30:b9:81:8f:56:7e:4f:16:c1:bf:17:5d: bb:d3:61:2d:74:af:fb:bc:db:8c:24:40:56:93:19:69:fe:9a: d6:b6:f5:36:29:86:6e:fc:23:3b:93:30:11:d4:19:7d:83:86: fa:f5:36:5b -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQw RDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2RTAeFw0yNTA4MjMy MTEzMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGMUQ1QkI4MTBDNTEz MUZGQkU5RDEzNjk2QTUwNDg4MEU1QzBEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1o78OLzfklAjfWewaeCbruM2ZIvO0Zp03rQ1ICKOdCV6lE+qF eKXXMHWNCpnv+4pUiw/8DuftzAVfKsN2T54zU1diQeseBQ7JKATmOjeNUSaIuYEH jrcEOWsIJiVv6HbN+StEJJs1Fgyu/leJJKstXOsnGNu5rSoPcMDO+bNJH9ByKFXq WJOVumt+rTlnegwg8UaJg1oiqDfbRSaa15WgbyyVpnZYVErhUQLk+LrYH/sQx/GP i/4Qt2yOxLD00PLFkXQdZcL4WQgKvL+VgOmEggQ2qcbMqgMPrHZqv6AoNZW5X0OR iPEooi6o+MvO2BQhmNBdSWDg/13qscu8lrxnAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUXx1buBDFEx/76dE2lqUEiA5cDSAwHwYDVR0jBBgwFoAUBA2WgwOzZPdyp1NX giDTU34WFm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZ VS9CQTJXZ3dPelpQZHlwMU5YZ2lEVFUzNFdGbTQuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJQU5HWVUvQkEyV2d3T3paUGR5cDFO WGdpRFRVMzRXRm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ACEez9N5yTxoZ/NeO6cIQWYOsIKN3NKleRMIApmwLORJLKyhYpSueUWXTOhMIX9v z+hc/kyVwN1fzh5BhiHS7HgecKCG1dorvUira7Os4rJPVhG2u8RnOnc82k0zs5p5 XjFe0/xLGMsCmYrG5EsuNUGqfPGJ63I5k/5p33k2cRDCS3ZhqitkcCNuFdonk8SV 2X0eKQJQ2LTY1p1590uhMzXm9IK+TLVjis78QKNB8EwRJz5ublemsn5ra/bN5XY7 91+tyggdfGGdcc9SpjC5gY9Wfk8Wwb8XXbvTYS10r/u824wkQFaTGWn+mta29TYp hm78IzuTMBHUGX2Dhvr1Nls= -----END CERTIFICATE-----Generated at Sun Aug 24 07:18:22 2025 by rpki-client